tuxonice/suncalc-php

Release historycaution

The package has only two releases, both published within about four minutes on the same day, leaving little evidence of a sustained release track. The repository was pushed recently, which partly offsets this concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent repository push is a compensating sign, but the lack of recent commit activity still limits confidence in ongoing maintenance.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool is configured. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or dangerous triggers. One of its two action references is unpinned, leaving a minor reproducibility and maintenance weakness.